IP Reputation checker

Check the reputation of any IP address.

Examples: 88.198.24.108     1.1.1.1     SSHD brute force     log4j (jndi) attack logs

Results for 128.199.48.147

    {
       "ip":  "128.199.48.147",
       "reverse":  false,
       "as_number":  "14061",
       "as_name":  "DIGITALOCEAN-ASN,  US",
       "country_code":  "NL",
       "country":  "Netherlands",
       "usage":  {
               "is_pingable":  false,
               "is_webserver":  false,
               "is_routable":  true,
               "is_tor":  false,
               "is_proxy":  false,
               "is_hosting":  true,
               "is_bogon":  false
       },
       "reputation":  {
               "web_spam":  false,
               "web_attacks":  true,
               "details":  "IP  being  used  in  web  attacks.",
               "botnet":  false,
               "email_spam":  false,
               "brute_force":  false,
               "ddos":  false
       },
       "recommendations":  {
               "block_traffic":  true,
               "block_registrations":  true,
               "block_comments":  true,
               "details":  "Likely  malicious  traffic  from  blacklisted  IP  addresses."
       }
}
Developer Mode & Terms of Use

Our API have a restriction of 200 queries per day. If you need more, please contact sales@noc.org and we will provide an API key with higher limits.

The API format is very simple and all you have to do is call our /api/ URL and provide the IP Address via a GET parameter. We will return a HTTP 200 with a json-encoded result on success or 400 HTTP error code if you provided an invalid domain or we are unable to process the request for any reason.

We believe that an example is worth a thousand words, so two examples should be enough:

Success result:
$ curl -D - https://reputation.noc.org/api/?ip=1.2.3.4

Error result:
$ curl -D - https://reputation.noc.org/api/?ip=invalidip

If you have any questions about the API, let us know.